Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File:                     ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier:          0NngfA7zCuKFDLyWyjQHMuI41UbkGbV1v7qtRM/hJPk=
Subject key identifier:   62:07:A7:0E:F0:C3:7F:FA:91:7F:27:D6:F3:D3:F0:DA:A0:B5:78:DA
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       01974C31EDE0F90F6479D5012B3CA6F8F18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 21:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:29 +0000
Files and hashes:         1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
                          2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
                          3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
                          4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
                          5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: +sR6XZGyYEaPX2H9JIHA4Rog99dHLfn7BgNN7C/HwBU=)
                          6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
                          7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
                          8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:ed:e0:f9:0f:64:79:d5:01:2b:3c:a6:f8:f1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Jun  7 21:00:29 2025 GMT
            Not After : Jun  8 21:00:29 2025 GMT
        Subject: CN=6207a70ef0c37ffa917f27d6f3d3f0daa0b578da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:75:b6:d4:5d:2b:da:af:4b:05:2f:1c:c6:
                    e0:3c:60:9c:61:9c:63:2c:38:8b:c7:84:7d:33:81:
                    e9:61:23:30:ca:9f:b0:cc:f4:e6:b5:e0:85:87:48:
                    25:aa:d6:f9:8c:76:77:4f:e6:d2:91:ce:37:b6:2d:
                    64:fc:72:7b:8b:91:7d:74:30:68:4b:45:16:44:23:
                    50:ce:57:de:8b:1a:8b:6f:0d:6e:e7:0b:de:b5:a1:
                    a5:2f:73:8d:d1:ec:50:5d:51:ed:b5:d1:9a:02:62:
                    a4:7b:fd:ef:ea:7d:d5:f7:ae:f2:43:93:40:aa:89:
                    c0:9b:85:a7:d1:e5:18:97:ad:76:70:61:91:e9:58:
                    04:4d:ec:6f:0d:41:44:8b:04:d0:cd:e7:dc:1e:7c:
                    11:99:76:8c:07:c1:21:23:98:1a:bf:c8:7e:2b:1b:
                    f5:9b:a5:da:2b:35:52:cf:ac:ae:3c:e3:03:25:31:
                    22:3d:fe:77:17:0e:6b:f9:f6:3a:07:7e:78:fa:2e:
                    69:ae:f0:cb:13:c3:42:30:37:af:91:4f:94:c9:20:
                    91:a8:c7:cc:9c:22:df:1c:ba:18:1a:31:57:56:3d:
                    a9:40:2e:3e:08:a4:95:47:af:28:41:b4:ef:02:27:
                    d6:35:ad:68:af:24:67:84:0e:44:c3:5d:eb:55:e1:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:A7:0E:F0:C3:7F:FA:91:7F:27:D6:F3:D3:F0:DA:A0:B5:78:DA
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:f7:d4:ef:4f:1d:e8:03:10:ba:a5:52:95:76:f2:20:ad:
         66:b5:b0:0a:67:45:5c:c0:30:72:c8:8f:cf:51:27:13:1e:6f:
         a9:a6:f0:7d:bc:ab:64:d5:91:5a:2f:af:f2:26:64:30:e9:ab:
         8d:8c:cb:c4:0b:3f:45:4b:4e:4c:39:6a:0d:d6:c6:73:30:44:
         c1:ee:84:4a:dc:56:5d:26:90:ff:76:e3:7d:d3:2e:e2:ff:da:
         00:57:fa:a9:6a:d5:86:b5:ab:02:28:28:c6:fd:56:2b:00:29:
         45:2c:22:b5:17:ae:a4:1f:43:a2:02:30:6b:7b:4e:56:24:de:
         6d:9b:b6:5f:e3:7c:1f:46:1f:ff:5f:47:5f:6d:1f:de:5e:6d:
         f2:30:7b:00:ce:c7:ca:30:8b:4d:c3:b0:f5:63:2b:0f:bf:9c:
         25:4b:6a:e4:81:4c:3b:3e:d7:5f:88:b9:00:54:93:e4:46:ab:
         ff:f9:cb:93:95:44:a6:6c:73:ae:d2:60:36:d4:20:8e:dd:7c:
         2d:7a:5c:40:ea:ec:90:0b:0e:39:e4:93:9f:0d:f5:66:1f:3e:
         84:31:00:e1:14:79:db:d2:76:a7:b7:6a:05:6c:ac:01:ab:e8:
         29:65:90:46:5d:25:5b:20:eb:47:90:71:2e:d7:fd:54:98:38:
         29:99:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:48:16 2025 by rpki-client